In our testing on two iPhones, the Pokémon Go app didn't explicitly ask permission for full account access when logging in with a Google username and password. By this point, it should have told us what data the app needs. Instead, it simply skipped straight to the app's terms of service, which makes no reference to the full account access.

Under the hood, you've given the app and its creators access to your search history, personal information, Google Photos, everything in Google Drive, search and location history, and more.

Not only can the app read your data, inbox, calendar events, and search history, it can also modify it. That's usually reserved for trusted apps, like browsers and mail clients -- such as Google Chrome -- and not games or most other apps.